JP5879451B1 - System and method for managing vehicles - Google Patents

Abstract

PROBLEM TO BE SOLVED: To realize user authentication accompanying vehicle control with a simple mechanism while maintaining security. In a system according to an embodiment, a user terminal stores a secret key and a server stores a public key corresponding to the secret key and a vehicle terminal in association with each other, and the user terminal performs predetermined control of the vehicle. The request is transmitted to the vehicle terminal together with the digital signature generated using the secret key stored in the user terminal, and the server stores the digital signature received from the user terminal in association with the vehicle terminal. Based on the verification result of the verification using the public key, predetermined control of the vehicle is executed. [Selection] Figure 2

Description

  The present invention relates to a system and a method for managing a vehicle, and more particularly, to a system for managing the vehicle, including a user terminal, a vehicle terminal provided in the vehicle, and a server, and a method executed by these. .

  2. Description of the Related Art Conventionally, a car sharing service for jointly using a car among members has been provided. In a system that provides the service, for example, a user of a car can use a smart card distributed in advance to open the door of the car. Is configured to perform locking / unlocking (see, for example, Patent Document 1). In the system configured as described above, specifically, information such as a user-specific registration code stored in the IC card is read by a card reader or the like provided in the automobile, and this registration code or the like is used. The door is locked / unlocked by receiving the authentication.

JP 2012-243228 A

  However, in the above-described conventional system, information such as a registration code is used for user authentication. However, since such information is normally managed by the management server of the system, the information such as the registration code is illegal from the management server. The risk of unauthorized use of the car increases. In order to reduce the risk of such unauthorized use, for example, the information such as the registration code stored in the IC card may be encrypted and decrypted on the card reader side. Since the processing capacity of the card reader is low, it is difficult to complicate the processing of the card reader. Therefore, it is desired to implement user authentication associated with vehicle control such as door locking / unlocking with a simple mechanism while maintaining security.

  An embodiment of the present invention has an object to realize user authentication associated with vehicle control with a simple mechanism while maintaining security. Other objects of the embodiments of the present invention will become apparent by referring to the entire specification.

  The system which concerns on one Embodiment of this invention is a system which comprises a user terminal, the vehicle terminal provided in the vehicle, and the server, and manages the said vehicle, Comprising: The said user terminal memorize | stores a secret key. A step in which the server stores the public key corresponding to the secret key in association with the vehicle terminal, and the user terminal stores a request for predetermined control of the vehicle in the user terminal. Transmitting to the vehicle terminal together with the digital signature generated using the secret key, and the server stores the digital signature received from the user terminal in association with the vehicle terminal. Executing the predetermined control of the vehicle based on a verification result of verification using the public key.

  The method which concerns on one Embodiment of this invention is a method of managing the said vehicle by a user terminal, the vehicle terminal provided in the vehicle, and the server, Comprising: The said user terminal memorize | stores a secret key, The server stores the public key corresponding to the secret key in association with the vehicle terminal, and the user terminal stores a request for predetermined control of the vehicle, A step of transmitting to the vehicle terminal together with a digital signature generated using a secret key; and the server stores the digital signature received from the user terminal in association with the vehicle terminal. And executing the predetermined control of the vehicle based on a verification result of verification using a public key.

  According to various embodiments of the present invention, user authentication associated with vehicle control can be realized with a simple mechanism while maintaining security.

The lineblock diagram showing roughly the composition of system 1 concerning one embodiment of the present invention. The block diagram which shows schematically the structure of communication I / F33 with which the vehicle terminal 30 in one Embodiment is provided. The block diagram which shows roughly the function which the server 10, the user terminal 20, and the vehicle terminal 30 with which the system 1 in one Embodiment has is provided. The figure which shows an example of the information managed in the vehicle terminal management table 51a in one Embodiment. The figure which shows an example of the information managed in the user management table 51b in one Embodiment. The figure which shows an example of the information managed in the reservation management table 51c in one Embodiment. The sequence diagram which shows the mode of the communication performed between the vehicle terminal 30 and the server 10 when initializing the vehicle terminal 30 in one Embodiment. The sequence diagram which shows the mode of the communication performed between the user terminal 20 and the server 10 when a user produces | generates a public key and a secret key in one Embodiment. The sequence diagram which shows the mode of the communication performed between the user terminal 20 and the server 10 when a user reserves a motor vehicle in one Embodiment. The figure which shows an example of the reservation screen 80 in one Embodiment. The figure which shows an example of the vehicle detail screen 90 in one Embodiment. The sequence diagram which shows the mode of the communication performed between the server 10, the user terminal 20, and the vehicle terminal 30 when a user locks / unlocks the door of a motor vehicle in one Embodiment. The sequence diagram which shows the mode of the communication performed between the vehicle terminal 30 and the server 10, when the vehicle terminal 30 transmits the operation information of a motor vehicle with respect to the server 10 in one Embodiment.

  FIG. 1 is a configuration diagram schematically showing a network configuration of a system 1 according to an embodiment of the present invention. As shown in the figure, a system 1 according to an embodiment includes a server 10, a user terminal 20, and a vehicle terminal 30 installed in an automobile, and a communication network including a mobile communication network and the Internet. 40 are communicably connected to each other. The system 1 in one embodiment functions as a car sharing system that provides a car sharing service that enables users to share a car. In FIG. 1, only one user terminal 20 and one vehicle terminal 30 are illustrated, but the system 1 in one embodiment includes a plurality of user terminals 20 and a plurality of vehicle terminals 30.

  First, the hardware configuration of the server 10 that functions as a management server for a car sharing service in one embodiment will be described. The server 10 is configured as a general computer, and as illustrated, a CPU (computer processor) 11, a main memory 12, a user I / F 13, a communication I / F 14, a storage (storage device) 15, and These components are electrically connected to each other through a bus. The CPU 11 loads an operating system and various other programs from the storage 15 into the main memory 12 and executes instructions included in the loaded programs. The main memory 12 is used for storing a program executed by the CPU 11, and is configured by a DRAM or the like, for example. In addition, the server 10 in one embodiment may be configured using a plurality of computers each having a hardware configuration as described above.

  The user I / F 13 includes, for example, an information input device such as a keyboard and a mouse that accepts an operator input, and an information output device such as a liquid crystal display that outputs a calculation result of the CPU 11. The communication I / F 14 is implemented as hardware, firmware, communication software such as a TCP / IP driver or PPP driver, or a combination thereof, and is configured to be able to communicate with the user terminal 20 and the vehicle terminal 30 via the communication network 40. Is done.

  The storage 15 is composed of, for example, a magnetic disk drive, and stores various programs such as a control program for providing a management function of a car sharing service. The storage 15 can also store various data for providing the management function. Various data that can be stored in the storage 15 may be stored in a database server or the like that is physically separate from the server 10 that is communicably connected to the server 10.

  In one embodiment, the server 10 also functions as a web server that performs HTTP communication between the user terminal 20 and the vehicle terminal 30. In addition, the server 10 can manage a website including a plurality of web pages having a hierarchical structure, and can provide a management function of the car sharing service to the user of the user terminal 20 via the website. The storage 15 can also store HTML data corresponding to this web page. HTML data is associated with various image data, and various programs described in a script language such as JavaScript (registered trademark) can be embedded.

  In one embodiment, the server 10 may provide a management function of a car sharing service via an application executed on an execution environment other than a web browser in the user terminal 20. Such applications can also be stored in the storage 15. This application is created using a programming language such as Objective-C or Java (registered trademark). The application stored in the storage 15 is distributed to the user terminal 20 in response to the distribution request. Note that the user terminal 20 can also download such an application from a server other than the server 10 (a server that provides an application market) or the like.

  As described above, the server 10 manages the website for providing the management function of the car sharing service, and distributes the web page (HTML data) constituting the website in response to a request from the user terminal 20. be able to. In addition, as described above, the server 10 may be an application executed on the user terminal 20 in place of or in addition to the provision of the management function using such a web page (web browser). The management function can be provided based on the communication. Regardless of which mode is provided, the server 10 transmits and receives various data (including data necessary for screen display) necessary for providing the management function of the car sharing service to and from the user terminal 20. be able to. Further, the server 10 can store various data for each identification information (for example, user ID) for identifying each user, and can manage the provision status of the car sharing service for each user. Although detailed description is omitted, the server 10 may have a function of performing user authentication processing, billing processing, and the like.

  Next, the hardware configuration of the user terminal 20 used by the user (member) of the car sharing service in one embodiment will be described. The user terminal 20 is an arbitrary portable information processing device that displays a web page on a web browser and implements an execution environment for executing an application, such as a smartphone, a tablet terminal, a wearable device, and a game dedicated terminal. Can be included.

  The user terminal 20 is configured as a general computer, and as shown in FIG. 1, a CPU (computer processor) 21, a main memory 22, a user I / F 23, a communication I / F 24, and a storage (storage device) 25. These components are electrically connected to each other through a bus.

  The CPU 21 loads an operating system and various other programs from the storage 25 to the main memory 22 and executes instructions included in the loaded programs. The main memory 22 is used for storing a program executed by the CPU 21 and is configured by, for example, a DRAM or the like.

  The user I / F 23 includes, for example, an information input device such as a touch panel and a button that receives a user input, and an information output device such as a liquid crystal display that outputs a calculation result of the CPU 21.

  The communication I / F 24 is implemented as hardware, firmware, software, or a combination thereof. In one embodiment, the communication I / F 24 includes a 3G / LTE module 24a for performing communication via a mobile communication network such as 3G or LTE included in the communication network 40, and Bluetooth (registered) as illustrated. And a short-range wireless communication module 24b for performing short-range wireless communication such as BLE (Bluetooth Low Energy) or NFC.

  The storage 25 is composed of, for example, a magnetic disk drive, a flash memory, or the like, and stores various programs such as an operating system. The storage 25 can store various applications received from the server 10 or the like.

  The user terminal 20 includes, for example, a web browser for interpreting an HTML format file (HTML data) and displaying the screen, and interprets and receives the HTML data acquired from the server 10 by the function of the web browser. A web page corresponding to the HTML data thus displayed can be displayed. Further, plug-in software capable of executing various types of files associated with HTML data can be incorporated in the web browser of the user terminal 20.

  When the user of the user terminal 20 uses the management function of the car sharing service provided by the server 10, for example, HTML data, an animation instructed by an application, an operation icon, or the like is displayed on the user terminal 20. . The user can input various instructions using the touch panel of the user terminal 20 or the like. An instruction input from the user is transmitted to the server 10 via a function of an application execution environment such as a web browser of the user terminal 20 or NgCore (trademark).

  Next, the hardware configuration of the vehicle terminal 30 provided in the automobile used jointly in the car sharing service of the embodiment will be described. As shown in FIG. 1, the vehicle terminal 30 is configured as a general computer, and as illustrated, a CPU (computer processor) 31, a main memory 32, a communication I / F 33, and a storage (storage device). 34, and each of these components is electrically connected to each other via a bus.

  The CPU 31 loads an operating system and various other programs from the storage 34 into the main memory 32 and executes instructions included in the loaded programs. The main memory 32 is used for storing a program executed by the CPU 31, and is configured by, for example, a DRAM or the like.

  The communication I / F 33 is implemented as hardware, firmware, software, or a combination thereof. FIG. 2 schematically shows the configuration of the communication I / F 33 of the vehicle terminal 30 in one embodiment. As shown in the figure, the communication I / F 33 in the embodiment includes a 3G / LTE module 33a (first communication module) for executing communication via a mobile communication network such as 3G or LTE included in the communication network 40. ), A short-range wireless communication module 33b (second communication module) for performing short-range wireless communication such as Bluetooth (registered trademark), BLE, or NFC, and the vehicle control unit 110 of the automobile 100. (Controller Area Network) CAN communication module 33c for executing communication.

  The 3G / LTE module 33a is configured to acquire position information of the vehicle terminal 30 (vehicle 100) by a GPS antenna and a 3G / LTE antenna (not shown). That is, the 3G / LTE module 33a receives GPS data from a GPS satellite by a GPS antenna, and acquires position information of the vehicle terminal 30 based on this data. Further, the 3G / LTE module 33a receives A-GPS data from the base station of the mobile communication network by the 3G / LTE antenna, for example, in a place where the GPS antenna cannot receive GPS data (for example, an underground parking lot). The position information of the vehicle terminal 30 is acquired based on this data.

  As shown in FIG. 2, the CAN communication module 33 c is detachably connected to a vehicle diagnosis connector (OBDII) 111 included in the vehicle control unit 110 of the automobile 100 via a connection connector 120. The vehicle control unit 110 includes a vehicle diagnosis connector 111, an engine control unit (ECU) 112, a meter control unit (M & A) 113, a body control unit (BCM) 114 for controlling a body such as a door, and a steering control unit (STRG). ) 115, various control units such as a vehicle attitude control unit (TRC) 116 such as a traction control and a power management unit (IPDM) 117. These control unit and vehicle diagnosis connector 111 are electrically connected to each other by CAN bus 118H (CAN H line) and 118L (CAN L line), and various control signals are transmitted via these buses 118H and L. Send and receive each other. Therefore, the vehicle terminal 30 can control each part of the automobile 100 by transmitting control signals to various control units via the vehicle diagnosis connector 111.

  The CPU 31 of the vehicle terminal 30 can convert the information received via the 3G / LTE module 33a or the short-range wireless communication module 33b into a signal suitable for CAN communication and provide it to the CAN communication module 33c. Further, the CPU 31 converts the signal received from the CAN communication module 33c into information suitable for communication via a mobile communication network or short-range wireless communication, and provides the information to the 3G / LTE module 33a or the short-range wireless communication module 33b. can do.

  Next, functions of the system 1 in the embodiment having such a hardware configuration will be described. FIG. 3 is a block diagram schematically showing functions of the system 1 (the server 10, the user terminal 20, and the vehicle terminal 30). As shown in FIG. 3A, the server 10 according to the embodiment includes an information storage unit 51 that stores various information, and processing related to management of basic information of a car sharing service such as a user or a car (vehicle terminal 30). The basic information management unit 52 that executes the above, the reservation management unit 53 that executes the processing related to the reservation of the vehicle by the user, and the user authentication management unit 54 that executes the processing related to the user authentication accompanying the control of the vehicle. These functions are realized by the cooperative operation of hardware such as the CPU 11 and the main memory 12 and various programs and tables stored in the storage 15, for example, instructions included in the loaded program This is realized by the CPU 11 executing. In addition, part or all of the functions of the server 10 illustrated in FIG. 3A can be realized by the cooperation of the server 10, the user terminal 20, and / or the vehicle terminal 30.

  The information storage unit 51 of the server 10 is realized by the storage 15 or the like, and as shown in FIG. 3A, the vehicle terminal management table 51a for managing information related to the vehicle terminal 30 and the user who is a member of the car sharing service. It has a user management table 51b for managing information and a reservation management table 51c for managing information related to car reservation by the user. FIG. 4 shows an example of information managed in the vehicle terminal management table 51a in the embodiment. As shown in the figure, the vehicle terminal management table 51a is associated with a “vehicle terminal ID” that identifies an individual vehicle terminal 30, and a “common key” that indicates a common key used for encryption of communication with the vehicle terminal 30. "Vehicle ID" that identifies the vehicle on which the vehicle terminal 30 is provided, "Vehicle basic information" that is basic information such as the vehicle type, year, and displacement of the vehicle, travel distance, fuel remaining amount, and position of the vehicle Information such as information (current location), door locking status, and driving status (statistical information such as engine speed, vehicle speed, steering angle, and number of sudden braking operations), etc. Manage. The vehicle terminal ID and the common key are registered at the time of initial setting of the vehicle terminal 30 as will be described in detail later. Further, as will be described in detail later, the vehicle operation information is registered by receiving information collected from the vehicle control unit 110 of the automobile 100, position information, and the like from the vehicle terminal 30.

  Here, the automobile used jointly in the car sharing service of the embodiment may include an automobile owned by a general owner other than the business operator of the car sharing service. In this case, the vehicle terminal 30 is provided by a car sharing service operator or the like to the vehicle owner who wishes to use the vehicle jointly, and the vehicle owner connects the provided vehicle terminal 30 to his / her vehicle. To do. The car owner can get a price in response to the use of the car he owns in the car sharing service. In addition, in the vehicle ID and vehicle basic information of the vehicle terminal management table 51a, information related to the vehicle on which the vehicle terminal 30 is provided is registered by the vehicle owner or a car shelling service provider.

  FIG. 5 shows an example of information managed in the user management table 51b in the embodiment. As shown in the figure, the user management table 51b is associated with a “user ID” for identifying an individual user, and “user basic information” is basic information about the user such as name, address, contact information, billing information, and payment information. ”Manages information such as“ public key ”which is a public key used for user authentication when the user controls the vehicle. As the user basic information, information provided by the user at a timing such as when the user is registered in the car sharing service is registered. The public key, which will be described in detail later, is registered by transmitting the public key generated by the user terminal 20 from the user terminal 20.

  FIG. 6 shows an example of information managed in the reservation management table 51c in one embodiment. As shown in the figure, the reservation management table 51c is associated with a combination of “vehicle ID” that identifies a car and “reservation date and time”, and “user ID” that identifies a user who reserves this car at this reservation date and time. Etc. "is managed. Although these details will be described later, these pieces of information are registered in response to a car reservation by the user via the user terminal 20.

  The basic information management unit 52 of the server 10 executes various processes related to management of basic information such as a user and a car (vehicle terminal 30). For example, the basic information management unit 52 executes processing related to registration, update, deletion, and the like of information managed in the vehicle terminal management table 51a and the user management table 51b described above. For example, the basic information management unit 52 associates the public key received from the user terminal 20 with the user and registers them in the user management table 51b.

  The reservation management unit 53 of the server 10 executes various processes related to a car reservation by a user. For example, when the reservation management unit 53 receives a reservation for a vehicle by the user via the user terminal 20, the reservation management unit 53 associates the user, the reserved vehicle, and the date and time of reservation with each other and registers them in the reservation management table 51c. .

  The user authentication management unit 54 of the server 10 executes various processes related to user authentication accompanying the control of the automobile. For example, the user authentication management unit 54 verifies the digital signature received from the vehicle terminal 30 using a public key stored in association with the vehicle terminal 30 and transmits the verification result of the verification to the vehicle terminal 30. . The verification of the digital signature includes, for example, verifying the digital signature using the date and time corresponding to the current date and time and the public key stored in association with the vehicle terminal 30.

  As illustrated in FIG. 3B, the user terminal 20 according to the embodiment includes an information storage unit 61 that stores various information, and a key management unit 62 that performs processing related to key (private key and public key) management. And a vehicle control requesting unit 63 that executes processing related to a request for control of the automobile. These functions are realized by the hardware such as the CPU 21 and the main memory 22 and various programs stored in the storage 25 operating in cooperation. For example, the CPU 21 can execute instructions included in the loaded program. Is realized by executing. In addition, part or all of the functions of the user terminal 20 illustrated in FIG. 3B can be realized by the cooperation of the user terminal 20, the server 10, and / or the vehicle terminal 30.

  The information storage unit 61 of the user terminal 20 is realized by the storage 25 or the like, and stores, for example, a secret key used for user authentication accompanying the control of the automobile.

  The key management unit 62 of the user terminal 20 executes various processes related to management of a secret key and a public key used for user authentication accompanying the control of the automobile. For example, the key management unit 62 generates a secret key and a public key in response to a request from the user, stores the secret key in the information storage unit 61 (such as the storage 25), and transmits the public key to the server 10 To do.

  The vehicle control request unit 63 of the user terminal 20 executes various processes related to the request for control of the automobile. For example, the vehicle control request unit 63 transmits a request for control of the automobile to the vehicle terminal 30 together with a digital signature generated using a secret key stored in the information storage unit 61. Here, the predetermined control of the automobile includes locking / unlocking of the door of the automobile.

  As illustrated in FIG. 3C, the vehicle terminal 30 according to the embodiment includes an information storage unit 71 that stores various types of information, a vehicle control unit 72 that performs processing related to automobile control, and a server 10. And a server cooperation unit 73 that executes a process related to. These functions are realized by the cooperation of hardware such as the CPU 31 and the main memory 32, and various programs stored in the storage 34. For example, the CPU 31 can execute instructions included in the loaded program. Is realized by executing. In addition, part or all of the functions of the vehicle terminal 30 illustrated in FIG. 3C can be realized by the cooperation of the vehicle terminal 30, the server 10, and / or the user terminal 20.

  The information storage unit 71 of the vehicle terminal 30 is realized by the storage 34 or the like, and stores, for example, a vehicle ID for identifying the vehicle terminal 30 and a common key used for encryption of communication with the server 10.

  The vehicle control unit 72 of the vehicle terminal 30 executes various processes related to the control of each unit of the automobile 100 connected via the vehicle diagnosis connector 111. For example, the vehicle control unit 72 controls each unit of the automobile 100 based on the verification result of the digital signature received from the user terminal 20. For example, the vehicle control unit 72 transmits a request for verifying the digital signature received from the user terminal 20 to the server 10 together with the digital signature, and controls each unit of the automobile 100 based on the verification result received from the server 10. Run. The control of the automobile 100 is performed, for example, by transmitting a control signal to various control units via the CAN communication module 33c.

  The server cooperation unit 73 of the vehicle terminal 30 executes various processes related to cooperation with the server 10. For example, the server cooperation unit 73 collects various operation information from the vehicle control unit 110 of the automobile 100 and transmits it to the server 10. For example, the server cooperation unit 73 transmits the position information of the vehicle terminal 30 to the server 10. For example, the server cooperation unit 73 executes various communications with the server 10 when the vehicle terminal 30 is initially set.

  Next, the operation of the system 1 in one embodiment having such a function will be described. First, an operation related to the initial setting of the vehicle terminal 30 will be described. FIG. 7 is a sequence diagram illustrating a state of communication performed between the vehicle terminal 30 and the server 10 when the vehicle terminal 30 is initially set. When the vehicle terminal 30 is initially set, first, as shown in the figure, the vehicle terminal 30 requests the server 10 for initial setting (step S100). The request for the initial setting is executed by the vehicle terminal 30 when the initial setting is instructed from a terminal device such as a general smartphone to the vehicle terminal 30 via short-range wireless communication or the like. For example, an automobile owner who is provided with the vehicle terminal 30 or an operator of a car sharing service instructs the vehicle terminal 30 to perform initial settings via a terminal device such as a smartphone.

  Next, the server 10 generates and registers the vehicle terminal ID of the vehicle terminal 30 that requested the initial setting, and the common key used for encryption of communication between the vehicle terminal 30 and the server 10, and the vehicle terminal 30. (Step S110). In one embodiment, the vehicle terminal ID and the common key are registered in the vehicle terminal management table 51a. The common key can be generated by applying various key generation algorithms according to a common key encryption method such as DES and AES.

  Then, the vehicle terminal 30 registers the received vehicle terminal ID and common key (step S120). In one embodiment, the vehicle terminal ID and the common key are registered in a predetermined area of the information storage unit 71 (such as the storage 34) of the vehicle terminal 30. As described above, in the initial setting of the vehicle terminal 30, the vehicle terminal ID and the common key of the vehicle terminal 30 are generated in the server 10 and registered in the server 10 and the vehicle terminal 30, respectively. Here, the communication between the vehicle terminal 30 and the server 10 after the initial setting is encrypted using a common key registered and shared during the initial setting. Note that it is not always necessary to perform encryption using such a common key. If encryption using a common key is not performed, generation and sharing of a common key is not necessary.

  The operation related to the initial setting of the vehicle terminal 30 has been described above. Next, the operation related to the generation of the public key and the secret key by the user will be described. FIG. 8 is a sequence diagram illustrating a state of communication performed between the user terminal 20 and the server 10 when the user generates a public key and a secret key. When generating a public key and a secret key, first, as shown in the figure, the user terminal 20 generates a public key and a secret key (step S200). In the car sharing service in one embodiment, a public key and a secret key are required for user authentication accompanying locking / unlocking of a car door. Therefore, a user who has registered as a car sharing service instructs the generation of a public key and a private key via a screen displayed on the user terminal 20, for example, before starting the use of the service (use of a car). To do. In response to the instruction, the user terminal 20 generates a public key and a secret key. In one embodiment, the generation of a public key and a secret key can be performed by applying various key generation algorithms according to a public key cryptosystem such as RSA, for example.

  Next, the user terminal 20 transmits the generated public key to the server 10 (step S210) and registers the secret key (step S220). In one embodiment, the secret key is registered in a predetermined area of the information storage unit 61 (storage 25 or the like) of the user terminal 20.

  Then, the server 10 registers the public key received from the user terminal 20 (step S230). In one embodiment, the public key is registered in the user management table 51b. As described above, in the generation of the public key and the secret key by the user, the secret key is registered in the user terminal 20 among the public key and the secret key generated in the user terminal 20 according to the public key cryptosystem, and the public key is the server 10. Sent to and registered.

  The operation related to the generation of the public key and the secret key by the user has been described above. Next, an operation related to a car reservation by the user will be described. FIG. 9 is a sequence diagram illustrating a state of communication performed between the user terminal 20 and the server 10 when the user reserves a car. When a user reserves a car, first, as shown in the figure, the server 10 transmits screen data of a reservation screen to the user terminal 20 (step S300). For example, the user accesses the website of the car sharing service via the user terminal 20 or executes the application for the service on the user terminal 20 and transmits the screen data of the reservation screen to the server 10. When requested, the server 10 transmits the screen data to the user terminal 20.

  FIG. 10 shows an example of a reservation screen 80 displayed on the user terminal 20 that has received the screen data. The reservation screen 80 according to the embodiment includes a date input area 81 for inputting a reservation date, a start time input area 82 for inputting a start time of a reservation time, and an end time of the reservation time, as illustrated. End time input area 83, an area input area 84 for inputting the area where the automobile to be reserved is located, a search button 85, and a search result display area 86. When the user inputs information in each of the input areas 81-84 as search conditions for a car to be reserved and selects the search button 85, information related to the car that meets the input search conditions is displayed in a list in the search result display area 86. The Specifically, it can be used for the input reservation date and time (date and time zone specified by the start time and end time) (not reserved by other users) and in the input region. The car that is located is identified by referring to the vehicle terminal management table 51a, the reservation management table 51c, etc., and information about the identified automobile (for example, images, basic vehicle information, etc.) is displayed in a list in the search result display area 86. Is done.

  Then, when the user selects a desired automobile from the automobiles listed in the search result display area 86 of the reservation screen 80, a vehicle detail screen 90 illustrated in FIG. 11 is displayed. As shown in the figure, the vehicle detail screen 90 displays information related to automobiles (for example, images, basic vehicle information, etc.) and reservation information (reservation date and time), and a reservation button 94 is arranged at the bottom of the screen.

  When the user selects the reservation button 94, a request for reservation is made from the user terminal 20 to the server 10 (step S310), and reservation is registered by the server 10 (step S320). In one embodiment, the reservation is registered by associating the vehicle ID of the car, the reservation date and time, and the user ID of the user in the reservation management table 51c. As described above, in the automobile reservation by the user, the vehicle ID, the reservation date and time, and the user ID are registered in association with each other. Here, the vehicle ID is associated with the vehicle terminal ID in the vehicle terminal management table 51a, and the user ID is associated with the public key in the user management table 51b. It can also be said that the date and time are registered in association with the public key.

  The operation related to the reservation of the car by the user has been described above. Next, an operation related to locking / unlocking the door of an automobile will be described. FIG. 12 is a sequence diagram illustrating a state of communication performed between the server 10, the user terminal 20, and the vehicle terminal 30 when the user locks / unlocks the door of the automobile. When the user locks / unlocks the door of the car, first, as shown in the figure, the user terminal 20 stores reserved vehicle information, which is information related to the car (vehicle terminal 30) reserved by the user at the current date and time, as a server. 10 is requested (step S400). In one embodiment, the user can instruct locking / unlocking of a car via a screen displayed on the user terminal 20, and when the instruction is given, the user terminal 20 makes a reservation to the server 10. A request for vehicle information is made. For example, when the reserved start time (or a predetermined time before the start time (for example, 10 minutes before) or the like) is reached, the user uses the user terminal 20 to instruct to unlock the door of the automobile.

  Next, the server 10 transmits reserved vehicle information to the user terminal 20 (step S410). In one embodiment, in the reserved vehicle information, the vehicle terminal ID of the vehicle terminal 30 associated with the vehicle reserved by the user of the user terminal 20 at the current date and time (see the vehicle terminal management table 51a and the reservation management table 51c). The current date and time (system date and time of the server 10) is included.

  Then, the user terminal 20 that has received the reserved vehicle information generates a digital signature based on the current date and time included in the received reserved vehicle information and the stored secret key (step S415). In other words, a digital signature using a secret key is performed for the current date and time. In one embodiment, the digital signature is generated, for example, by encrypting a hash value of the current date and time with a predetermined encryption method using a secret key stored in the information storage unit 61.

  Subsequently, the user terminal 20 requests the vehicle terminal 30 to lock / unlock the door (step S420). In one embodiment, the lock / unlock request is made between the user terminal 20 and the vehicle terminal 30 using near field communication. Here, in one embodiment, when the user terminal 20 establishes a short-distance wireless communication connection with the vehicle terminal 30, the vehicle terminal ID included in the reserved vehicle information and the vehicle terminal ID acquired from the vehicle terminal 30 are Is matched. The lock / unlock request includes, for example, a “vehicle terminal ID” included in the reserved vehicle information, a “mode” identifying whether the request is a lock request or an unlock request, and the current date and time included in the reserved vehicle information. Information such as “date and time” to be shown and the generated digital signature is included.

  Then, the vehicle terminal 30 requests the server 10 to verify the digital signature included in the lock / unlock request received from the user terminal 20 (step S430). The request for verifying the digital signature includes information such as the vehicle terminal ID, the date and time, and the digital signature. In one embodiment, the lock / unlock request received from the user terminal 20 is sent to the server 10. Sent. Note that, as described above, in one embodiment, the communication between the vehicle terminal 30 and the server 10 is encrypted using a common key generated and shared when the vehicle terminal 30 is initially set.

  Then, the server 10 verifies the digital signature received from the vehicle terminal 30 (step S440), and transmits the verification result to the vehicle terminal 30 (step S450). In one embodiment, the verification of the digital signature first specifies a vehicle ID corresponding to the received vehicle terminal ID with reference to the vehicle terminal management table 51a, and corresponds to a combination of the specified vehicle ID and the received date and time. The user ID (that is, the user ID of the user who has reserved the car identified by the specified vehicle ID at the received date and time (current date and time)) is specified with reference to the reservation management table 51c, and corresponds to this user ID. The public key is specified with reference to the user management table 51b. Then, the digital signature is verified using the received date and time and the specified public key. For example, the hash value of the received date and time is compared with the hash value obtained by decrypting the digital signature using the public key.

  Here, when the user who has requested the lock / unlock of the door appropriately reserves the automobile on which the vehicle terminal 30 is provided at the current date and time, the secret key and the digital signature when the digital signature is generated Since the public key for verifying both is the key of the user (the public key generated by the user on the user terminal 20 and the corresponding private key), it is determined that the verification is OK. For example, when the hash value obtained by decrypting the digital signature and the hash value of the date and time received from the vehicle terminal 30 match, it is determined as verification OK, and when these values do not match, it is determined as verification NG. The

  Subsequently, the vehicle terminal 30 that has received the verification result of the digital signature executes lock / unlock processing based on the verification result (steps S460 and S470). That is, when the verification result is verification OK, the lock / unlock process is executed as it is, and when the verification result is verification NG, a predetermined error process is executed without executing the lock / unlock process. Execute. In one embodiment, the lock / unlock process is executed when the vehicle terminal 30 sends a control signal corresponding to the lock / unlock of the door to the vehicle control unit 110 (body control unit 114) via the CAN communication module 33c. Is done by sending.

  As described above, in locking / unlocking a car door, a digital signature (digital signature added to the current date and time) generated using the current date and time (temporary information) and the secret key is used as a public key corresponding to the secret key. The user who requests the lock / unlock is authenticated by using the verification. Here, since the lock / unlock request for the vehicle terminal 30 is made by the user terminal 20 using short-range wireless communication, the lock / unlock by a third party located remotely from the vehicle terminal 30 (automobile) is performed. Requests can be prevented. In addition, since a digital signature is added to the current date and time, which is temporary information, there is little security problem even if the current date and time are illegally leaked. Furthermore, since the secret key generated and registered in the user terminal 20 is not transmitted to other devices, the risk of the secret key being leaked is low. Moreover, since the server 10 performs verification of the digital signature, it can be said that the processing load of the vehicle terminal 30 is reduced.

  The operation related to locking / unlocking the door of the automobile has been described above. Next, an operation related to transmission of vehicle operation information by the vehicle terminal 30 will be described. FIG. 13 is a sequence diagram illustrating a state of communication performed between the vehicle terminal 30 and the server 10 when the vehicle terminal 30 transmits automobile operation information to the server 10. In one embodiment, the vehicle operation information is transmitted periodically (for example, every hour). First, as shown in the figure, the vehicle terminal 30 transmits the operation information to the server 10 (step S500). In one embodiment, the operation information is transmitted, for example, by the vehicle terminal 30 transmitting information collected from various control units included in the vehicle control unit 110 of the automobile 100, position information, and the like to the server 10. Is done by.

  Next, the operation information received from the vehicle terminal 30 by the server 10 is registered (step S510). In one embodiment, the operation information is registered in the vehicle terminal management table 51a.

  Then, the server 10 determines whether or not the door needs to be locked / unlocked based on the received operation information (step S520). If it is determined that the lock / unlock is necessary, the server 10 locks / unlocks. Is transmitted to the vehicle terminal 30 (step S530). In one embodiment, the determination of whether locking / unlocking is necessary can be performed by applying various criteria. For example, if the engine is stopped for a certain period of time and the door is unlocked, it is determined that the user is likely to have forgotten to lock the door, and the door is locked. Criteria that determine that it is necessary may be applied.

  And the vehicle terminal 30 which received the request | requirement of lock / unlock performs the lock / unlock process of a door according to the request | requirement content (step S540). As described above, in the transmission of the vehicle operation information by the vehicle terminal 30, when the vehicle operation information is periodically transmitted to the server 10 and determined to be necessary based on the operation information, the door lock / unlock is performed. Locking is performed.

  In the above-described embodiment, the digital signature is generated using the current date and time (the digital signature is added to the current date and time). However, the mode for identifying whether the request is a lock request or the unlock request, the current date and time, A digital signature may be generated using In addition, a digital signature can be generated based on various other information. In this case, similarly to the current date and time, it is preferable to generate the digital signature based on temporary information with a small security problem in the case of outflow.

  In the above-described embodiment, the user authentication using the digital signature is performed for the lock / unlock of the automobile door. However, the same user authentication can be applied to various automobiles other than the door lock / unlock. (For example, engine ON / OFF, etc.).

  In the above-described embodiment, the car sharing system that provides the car sharing service is illustrated, but the embodiment of the present invention is not limited to this. For example, a system that jointly uses a vehicle (such as a bicycle) other than an automobile and in which a user controls the vehicle (for example, lock / unlock of a lock mechanism) can be included in the embodiments of the present invention. . Moreover, systems other than the system of the aspect which uses a vehicle jointly can also be contained in embodiment of this invention. For example, a system that controls a vehicle that it owns can be included in an embodiment of the present invention. In this case, since it is not necessary to manage the reservation of the vehicle, it is only necessary to manage the association between the vehicle ID (vehicle terminal 30) and the user ID (public key), and the association with the date and time becomes unnecessary.

  In the embodiment of the present invention described above, the user terminal 20 stores the secret key and the server 10 stores the public key corresponding to the secret key and the vehicle terminal 30 in association with each other. The control (door lock / unlock) request is transmitted to the vehicle terminal 30 together with the digital signature generated using the secret key stored in the user terminal 20, and the vehicle terminal 30 receives from the user terminal 20. The predetermined control of the vehicle is executed based on the verification result of the verification using the public key stored in the server 10 in association with the vehicle terminal 30 of the digital signature. As described above, according to the embodiment of the present invention, user authentication associated with vehicle control can be realized with a simple mechanism while maintaining security by using a digital signature according to a public key cryptosystem.

  In the above-described embodiment, the vehicle operation information is configured to be transmitted from the vehicle terminal 30 to the server 10, but instead of this, or in addition to this, the vehicle terminal 30 to the user terminal 20. On the other hand, it can also be configured to be transmitted using short-range wireless communication. In this case, all or part of the received operation information may be displayed on the user terminal 20. In this way, the user in the vehicle compartment can check various operation information not displayed on the meter on the user terminal 20. Moreover, you may enable it to perform a failure diagnosis of a motor vehicle based on operation information by installing and executing a failure diagnosis application in the user terminal 20.

  The processes and procedures described in this specification are implemented by software, hardware, or any combination thereof other than those explicitly described in the embodiments. More specifically, the processes and procedures described in this specification are performed by mounting logic corresponding to the processes on a medium such as an integrated circuit, a volatile memory, a nonvolatile memory, a magnetic disk, or an optical storage. Realized. Further, the processes and procedures described in this specification can be implemented as a computer program and executed by various computers.

  Even if the processes and procedures described herein are described as being performed by a single device, software, component, or module, such processes or procedures may be performed by multiple devices, multiple software, multiple Component and / or multiple modules. In addition, even though the data, tables, or databases described herein are described as being stored in a single memory, such data, tables, or databases are provided on a single device. Alternatively, the data can be distributed and stored in a plurality of memories or a plurality of memories arranged in a plurality of devices. Further, the software and hardware elements described herein may be implemented by integrating them into fewer components or by decomposing them into more components.

  In the present specification, when the constituent elements of the invention are described as one or a plurality, or when they are described without being limited to one or a plurality of cases, they should be understood separately in context. The component may be either singular or plural.

1 system 10 server 20 user terminal 30 vehicle terminal 40 communication network 51 information storage unit 52 basic information management unit 53 reservation management unit 54 user authentication management unit 61 information storage unit 62 key management unit 63 vehicle control request unit 71 information storage unit 72 vehicle Control unit 73 Server cooperation unit 80 Reservation screen 90 Vehicle detail screen 100 Automobile 110 Vehicle control unit 111 Vehicle diagnostic connector 120 Connector for connection

Claims (8)

A system comprising a user terminal, a vehicle terminal provided in a vehicle, and a server, and managing the vehicle,
The user terminal storing a secret key;
The server stores the public key corresponding to the secret key in association with the vehicle terminal; and
The user terminal transmitting a request for predetermined control of the vehicle to the vehicle terminal together with a digital signature generated using the secret key stored in the user terminal;
The predetermined control of the vehicle based on a verification result of verification of the digital signature received from the user terminal by the vehicle terminal using the public key stored in association with the vehicle terminal by the server. run and executing, the a,
The step of associating and storing the public key and the vehicle terminal includes the server associating and storing the user associated with the public key and the vehicle associated with the vehicle terminal. ,
In the step of storing the secret key, the user terminal generates the secret key and the public key in response to an instruction from a user, stores the secret key in the user terminal, and stores the public key in the server And the server stores the public key received from the user terminal and the user in association with each other.
system. The system of claim 1, comprising:
The step of executing the predetermined control includes:
The vehicle terminal transmitting a request for verification of the digital signature received from the user terminal to the server together with the digital signature;
The server verifies the digital signature received from the vehicle terminal using the public key stored in association with the vehicle terminal, and transmits the verification result of the verification to the vehicle terminal. Including,
system. The system of claim 2, comprising:
In the step of transmitting the predetermined control request, the user terminal transmits temporary temporary information and the digital signature generated using the temporary information and the secret key to the vehicle terminal. Including
Transmitting the request for verification of the digital signature includes the vehicle terminal transmitting the temporary information and the digital signature to the server;
The step of transmitting the verification result includes the server verifying the digital signature using the temporary information received from the vehicle terminal and the public key.
system. The system according to any one of claims 1 to 3 ,
The step of storing the public key and the vehicle terminal in association includes the server storing the public key, the vehicle terminal, and the date and time in association with each other,
The verification of the digital signature includes verifying the digital signature using the date and time corresponding to the current date and time and the public key stored in the server in association with the vehicle terminal.
system. The step of associating and storing the public key and the vehicle terminal is reserved when the server accepts a reservation of the vehicle by the user via the user terminal and the user and the reserved vehicle. The system according to claim 4 , further comprising storing the date and time in association with each other. The system according to any one of claims 1 to 5 ,
The vehicle terminal is
CPU,
A CAN communication module that is connected to a vehicle diagnostic connector connected to one or a plurality of vehicle control units of the vehicle via a connection connector and performs CAN communication with the plurality of vehicle control units;
A first communication module for performing communication with the server via a mobile communication network;
A second communication module for performing near field communication with the user terminal,
system Wherein the predetermined control of the vehicle system according to 6 or claims 1 comprises a locking / unlocking of a door of the vehicle. A method of managing the vehicle by a user terminal, a vehicle terminal provided in the vehicle, and a server,
The user terminal storing a secret key;
The server stores the public key corresponding to the secret key in association with the vehicle terminal; and
The user terminal transmitting a request for predetermined control of the vehicle to the vehicle terminal together with a digital signature generated using the secret key stored in the user terminal;
The predetermined control of the vehicle based on a verification result of verification of the digital signature received from the user terminal by the vehicle terminal using the public key stored in association with the vehicle terminal by the server. Bei for example, executing a,
The step of associating and storing the public key and the vehicle terminal includes the server associating and storing the user associated with the public key and the vehicle associated with the vehicle terminal. ,
In the step of storing the secret key, the user terminal generates the secret key and the public key in response to an instruction from a user, stores the secret key in the user terminal, and stores the public key in the server And the server stores the public key received from the user terminal and the user in association with each other.
Method.